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Abstract 

We initially consider a quantum system consisting of two qubits, which 
can be in one of two nonorthogonal states, |^'o) and|$i). We distribute 
the qubits to two parties, Alice and Bob. They each measure their qubits 
and then compare their measurement results to determine which state 
they were sent. This procedure is error-free, which implies that it must 
sometimes fail. In addition, no quantum memory is required; it is not 
necessary for one of the qubits to be stored until the result of the mea- 
surement on the other is known. We consider the cases in which, should 
failure occur, both parties receive a failure signal or only one does. In the 
latter case, if the two states share the same Schmidt basis, the states can 
be discriminated with the same failure probability that would be obtained 
if the qubits were measured together. This scheme is sufficiently simple 
that it can be generalized to multipartite qubit, and qudit, states. Appli- 
cations to quantum secret sharing are discussed. Finally, we present an 
optical scheme to experimentally realize the protocol in the case of two 
qubits. 



1 Introduction 

Suppose we have two qubits prepared in one of two quantum states, |5'o) or l^*!) . 
We now give one qubit to Alice and one qubit to Bob. Both parties know that 
the state is either \'^o) or l^*!), and their task is to perform local measurements 
on their qubits and communicate through a classical channel to determine the 
state they have been given. Alice and Bob can perfectly distinguish between 
the states using local operations and classical communication only if the states 
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are orthogonal pp. When Iv&o) and|\I/i) are not orthogonal, Alice and Bob can 
use two different strategies to distinguish between the states. 

The first one is the minimum error state discrimination approach. In this 
case, after Alice and Bob measure their qubits, they have to give a conclusive 
answer about the state; they are not allowed to give "don't know" as an answer. 
However, since the states are not orthogonal, the price that the two parties must 
pay for giving a definite answer is the chance that they will make a mistake and 
incorrectly identify the state. The minimum probability of making a wrong 
guess, when each state is equally likely, is |21 



An alternative approach to the state discrimination problem, is the unam- 
biguous state discrimination method. In this case, some measurement outcomes 
are allowed to be inconclusive; that is Alice and Bob might fail to identify the 
state, but if they succeed they will not make an error. If each state is equally 
likely and both qubits are measured together, then the optimal probability to 
successfully and unambiguously distinguish the states is ^ ,4, ^ 



The probability of getting an inconclusive result, which provides no informa- 
tion about the state, is 1 —pidp- This success probability can also be achieved if 
the qubits are measured separately, one by Alice and one by Bob, and they are 
allowed to communicate through a classical channel |21E1- In this procedure, 
Alice makes a projective measurement on her qubit that gives her no informa- 
tion about the state, and she then communicates the result of her measurement 
to Bob. Based on this information. Bob is able to make a measurement on his 
qubit that allows him to decide, with a success probability of Pidp, what the 
initial state was. 

If one wants to use this procedure as part of a quantum communication 
scheme, in particular for secret sharing, there are difficulties. In a secret sharing 
scheme, Alice and Bob are sent parts of a message or key by a third party, 
Charlie, and these parts have to be combined in order for the message or key 
to be revealed [3 El El- The first problem, then, is that if the parts are to 
be combined at a time significantly later than when they were sent, quantum 
memory is required, i.e. the qubits have to be protected against decoherence for 
a long time. If one attempts to surmount this difficulty by having the parties 
measure their qubits immediately upon receiving them, one is faced with the 
problem that the information gain is asymmetric. Alice learns nothing about 
the key, and Bob learns everything. The only way this could be useful is if Alice 
and Bob are in the same location and are to use the key immediately. If they 
are in separate locations and will be using the key later, another procedure is 
required. 

In a previous paper we discussed such a scheme |10| . In it, both parties 
measure their qubit immediately upon receiving it, each obtaining a result of 
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either or 1. There are four sets of resuhs: {0,0}, {1, 1},{0, 1}, and {1,0}. 
The result {0,0} corresponds to l^&o), the result {1,1} corresponds to l^*!), 
and the results {0, 1}, and {1,0} correspond to failure. It was shown that in 
the case that the two states have the same Schmidt basis, the probability of 
successfully identifying the state is given by pidp. This procedure can be used in 
a secret-sharing scheme; the set of measurement results obtained by Alice and 
Bob. which is classical information, can be stored indefinitely and compared at 
a later time to reveal the key. 

This scheme does, however, have a drawback. The key bits for which the 
measiircmcnt failed, and which, therefore, must be discarded, are only identified 
after Alice and Bob have compared their bit strings. It would be much better if 
the bits that must be discarded could be identified immediately. The previous 
procedure requires that Alice and Bob get together and then tell Charlie which 
bits are good and which are not. He can then send them a message. A procedure 
in which the failed bits are immediately identified, allows Charlie to send Alice 
and Bob the two-qubit states from which the key bits can be extracted, discard 
the failed bits, and then immediately send them the message. At some later 
time, Alice and Bob can get together, combine their bit strings to get the key, 
and then read the message, without further input from Charlie. This latter 
scheme is much more flexible. 

This can be accomplished by adding a third measurement result for one 
or both of the parties. If this added result is obtained, the measurement has 
failed to distinguish the states. In this paper, we will examine both the case in 
which both parties have three measurement outcomes, 0, 1, or / for failure to 
distinguish, or only one does. In the latter case, the remaining party has only 
the outcomes and 1. We shall first examine the case in which both Alice and 
Bob receive a failure indication when the measurement fails. We shall find that 
this kind of scheme is impossible for two-qubit states if both states are to be 
detected with a nonzero probability. We shall then show that a procedure in 
which only one of the parties receives a failure signal is possible, and construct 
the necessary POVM. In addition, we shall show how this procedure can be 
implemented optically. The qubits are the polarization states of photons. Two 
photon states are created and one photon each is sent to Alice and Bob. Using 
linear optics they can perform the necessary mcasiirements and identify, with a 
certain probability, which of two possible two-photon states was sent. Finally, 
we shall show how the procedure in which only one party receives a failure signal 
can be generalized to N parties, and to qudits rather than qubits. The case of 
N parties discriminating among three 7V-qutrit states is discussed in detail. 

2 Failure indication received by both parties 

As discussed in the Introduction, we shall first assume that the measurements 
that Alice and Bob make have three possible outcomes, 0, 1, and /, which de- 
notes failure to distinguish . The POVM operators that characterize the mea- 
surements are {Aq, Ai,Af} for Alice and {Bq, Bi,Bf} for Bob. These operators 
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satisfy 

ia= ib= Yl ^l^i' (3) 

j=o,i,/ j=0,l,/ 

where I a is the identity on Ha, the Hilbert space of Ahce's qubit, and Ib is 

the identity on Hb, the space of Bob's qubit. We suppose that measurement 
results {0,0} (Ahce obtains and Bob also obtains 0) and {1,1} correspond 
to l^*!), and {0, 1} and {1,0} correspond to |^'o)- The reason for this choice is 
that we do not want Alice or Bob to be able to tell from only the result of their 
measurement which state was sent. For example, if Alice always measured 
when l^fo) was sent and 1 when was sent, then she would have no need of 
any information from Bob to determine the identity of the state. Consequently, 
for each state, Alice and Bob must have the possibility of receiving either a 
or a 1. The correspondence between states and measurement results is one 
of only two choices that satisfies this condition (the other simply switches the 
measurement results corresponding to 14*0) and l^*!) ). The condition that no 
errors are allowed requires that 

^o-Bo|*o)=0 AiBi|*o)=0 (4) 
AoBi|*i)=0 AiBo\^i)=0, (5) 

and the condition that, if the measurement fails, then both Alice and Bob find 
the result /, is 

AfB,\^k)=0 AjBf\^,)=0, (6) 

where j = 0, 1 and fc = 0, 1 

Expressing I'^o) and I'^i) in their Schmidt bases we have 

1 

|*0) = Y ^^ll'^Al) \UBl) (7) 

1=0 

1 

= Yl V^l^^;) ® l^s;), (8) 

(=0 

where {^^0,^^11} and {vaotVai} are orthonormal bases for Alice's space, and 
{ubojUbi} and {fsoi^^si} are orthonormal bases for Bob's space. The coef- 
ficients Ao; and Xu where I = 0, 1, are the eigenvalues of the reduced density 
matrices corresponding to jvPo) and l^*!), respectively. Substituting this repre- 
sentation into the conditions in the previous paragraph, we find, first, that the 
condition AfBjl'^o) =0 implies that 

^/X^Af\uAo) O Bj\uBo) = -y/>mAf\uAi) Bj\uBi)- (9) 

This is only possible if Af\uAo) is parallel to Af\uAi) and if Bj\uBo) is parallel 
to Bj\uBi)- Then, we have, for some vectors \riAf) and \r]Bj), that 

Af\UAo) = CoflVAf) Bj\uBo) = djolVBj) 

Af\uAi) = cif\r]Af) Bj\uBi) = dji\r]Bj), (10) 
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where c// and dji are constants, and |l'7yi/|l = 1 and HTysjH = 1. We can then 
express Af as 

Af = \VAf)icof{uAo\ + Cif{uAl\) 

= Xf\r]Af){rfl (11) 



(12) 



where 

I-/) - (|eo,|2 + |e,,p)i/2(^S/kAo)+cJ,|u^i))- 

Similarly, we find that for j = 0, 1, / 

= Xj\r]Aj)(rj I Bj = Vj\r^Bj) {sj \ , (13) 

where {rjAj), \VBj), \rj), and \sj) are unit vectors, and the constants Xj and yj 
are yet to be determined. 

We can substitute the above expressions for the POVM operators into the 
conditions for no errors and for simuhaneous failure results, Eqs. Q and ©. 
The equations containing |^o) are 



y Xoo{ro\uAo){so\uBo) + V Aoi(ro|uAi) (sol^si) = 
\/%)o{ri\uA()){si\uBo) + ^/>^{ri\uAi){si\uBi) = 
\/)m{rf\uAo){sj\uBo) + \/>m-{rf\uAi){sj\uBi) = 
\/XoQ{r-i\uAo){sf\uBQ) + \/Xoi {rj\uAi){sf\uBi) = 0. (14) 

Defining the matrix 



M(") = ( ^ ] (15) 



and the vectors 



— * 



01 



(16) 



we can express the above equations as 

• M(°)so = r}- M'^^Isj = 

fl ■ M(°)si = r* • M(o)s/ = 0. (17) 

It is straightforward to show that if both Aqo and Aqi are not zero, and if 
W* ■ M^^'a; = and w* ■ M'^^^y — 0, for uJ 7^ 0, then x is a multiple of y. 
Applying this to Eqs. p7l) . we see that si is a multiple of s/ and that sq is also 
a multiple of s/ . The fact that the three vectors, sqj si and s/, are parallel 
violates the condition Ib ~ X]j=o 1 /2/jkj)(^j l- If attempt to circumvent 
this by choosing either |ro) or \ri) equal to zero, we still find that sqi si and s/ 
are parallel. 

The cases in which either Aqo or Aoi are zero also need to be examined, but 
the conclusion is the same; it is not possible to construct a POVM that satisfies 
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Eqs. Q and ^ and for which both {"^q) and have a nonzero probabiUty of 
being detected. There are simply too many restrictions on the POVM elements 
and they cannot all be satisfied. Therefore, we cannot construct a POVM that 
is error-free, and for which Alice and Bob receive simultaneous failure signals, 
when the procedure fails. It should be noted, as shown in JU], that if qutrits are 
used instead of qubits, an error-free POVM with simultaneous failure signals is 
possible. 

3 Failure signal received by one party 

In light of what we have just learned it makes sense to now consider the situation 
in which only one party receives a failure indication when the measurement fails. 
In particular, both parties will have the possibility of receiving a failure signal, 
and if either one of them does (even if the other does not), then the procedure 
has failed. No assumption is made about which party will receive a failure 
signal. We shall also consider a special case, that in which j^'g) and have 
the same Schmidt bases and are given by 



l^o) = cos 00 1 00) + sin 6io 1 11) 
l^-i) = cos6ii|00) +sin6li|ll). 



(18) 



The conditions that no errors are allowed are the same as before 



AoSo|*o) =0 



AiSo|*i> =0. 



(19) 



These conditions imply, as before, that for j = 0, 1 



A J = Xj\r]Aj){rj\ 



B] = vMBj){sjl 



(20) 



and we shall express the vectors \rj) and \sj) in the basis {|0), |1)} as 



|ro) =ao|0)+ai|l) 
ki) =5o|0) 



|so) -co|0>+ci|l) 
=do|0)+rfi|l) 



(21) 



The no-error conditions can now be expressed as 



((ro|(so|)|*o>=0 
((^o|(si|)|*i>=0 



((^i|(^i|)l*o)-0 
((ri|(.o|)|*i>-0. 



(22) 



Defining the ratios 




(23) 



(24) 
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Equations (|22|l become 

1 + ZqzJ tan 6*0 = 1 + zj'zg tan 6*0 ~ 

1 + 20^3 tan 01=0 1 + zlz^ tan 01=0 (25) 

A necessary condition for these equations to have a solution is that tan 9o = 
± tan . We are not interested in the case where tan 6*0 — tan 6i , since this 
imphes that our states are identical. We wish to examine the case where tan 9o = 
— tan 01, which implies that 6i = —Oq. Hence, our two states can be expressed 
as 

l^-o) = cos^olOO) +sin6lo|ll) 

=cos6lo|00) -sin6lo|ll) (26) 

In this case, we find 

2:2 = — — cot6'o Z3 = — cot^o zi = — zq. (27) 

zo zo 



We can now express the vectors \rj) and 



Si 



|ro) = -=i=(|0) + zo|l)) 

vi + Nor 
vi + Nor 




|zop +cot 00 



The parameter zq is yet to be determined. 

The failure operators for Alice and Bob can be expressed as 

A^Af =Ia- |xonro)(ro| - \x^W^){r^\ (28) 

B\Bf ^Ib- |yonso)(so| - |yin5i)(si|, (29) 

where Xj, yj, and zq, where j — 0,1, must be chosen so that these are positive 
operators. The condition A^Af > implies that 

(30) 



or, in matrix form 



I go(|xoj -Ixil ) -, _ [zqI (laol +|a:i| ) I — V 
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This matrix will be postive if both TtMa > 0, which implies that 

2-i\xo\^-\x,\^)>0, (32) 
and det Ma > 0, which implies 

(1 + izon'(i - (kop + + 4|zonxonxi|2 > o. (33) 

Similar conditions are found from the requirement that B'jrBf > 0. 

Our goal is to minimize the total failure probability, p/, which is found by 
summing over all measurement results that contain a failure signal, and is 



1 1 

Pf^2 E(*fcl(4^/ ^Ib+Ia(^ B\Bf - A\Af ® B}Bf)\<Sj^). (34) 

fc=0 

We have assumed that the probability of receiving either |4'o) or is the 
same, i.e. 1/2. We shall specialize to the case xq = xi and yo = yi. As we shall 
see, this will still allow us to obtain the minimum achievable failure probability. 
Doing so we find that 

4^/ = /A--^i^(io)(oi + izoni)(ii) 

i + l^ol 



B}Bf = iB- 'l^f'^' (|0)(0| + ^|1)(1|). (35) 



It is clear from Eq. (|34|l that the failure probability will be a minimum when 
\xq\ and |yo| are as large as possible, subject to the constraint that the operators 
AjAf and B^j:Bf are positive. From the above equations, we see that this implies 
that if \zo\ < 1, then \xo\'^ = (1 + |zoP)/2 and 

4^/ = (l-|z„n|l)(l|, (36) 

and if |zo| > 1, then \xo\'^ = [1 + (l/|zoP)]/2, and 

4A/=fl-^)|0)(0|. (37) 



\zo 

We also have that if cot^ Oq < \zo\^ , then |?/oP = [1 + (cot 6'o/|zo|)^]/2 and 

cot^ 6*0 



B}Bf=[l-^)\l){ll (38) 



and if cot^ 6*0 > |zoP, then |yoP = [1 + (|zo|/ cot 6'o)^]/2 and 
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Let us consider the case when j^ol < 1 and < 9 < 7r/4, which imphes that 
Eqs. H36() and 1)3911 apply. We then have that the failure probability is given by 

= l-2|zopsin2 0o, (40) 

and it is clear that this is minimized by choosing \zq\ = 1. This gives us 

p/ = cos(20o), (41) 

which is equal to the optimal failure probability for distinguishing the states 
l^'o) and l^'i). This failure probability is given by 

= K'J'il^o)! =cos(20o). (42) 

This implies that by using this procedure, we can distinguish the states just as 
well by measuring the qubits separately and comparing the results as we can by 
performing a joint measurement on both of them. 

Let us now summarize the results of the preceding calculations. The states 
we are distinguishing are given in Eq. (|26|l . with < 9 < tt/A. Alice's POVM 
elements are for j = 0, 1, with 

\ro) = ;^(|0) + |1)) 

|ri> = -i=(|0)-|l)), (43) 

and Af = 0. This implies that Alice will only obtain the results or 1 for her 
measurement, she will never receive a failure result. In fact, she simply performs 
a projective measurement. Bob's POVM elements are 

Bjs, -i(l + tan2(?o)|s,)(s,| (44) 

for j = 0, 1, with 

I So) = sin0o|O)-cos0o|l) 

|si) - sin0o|O)+cos0o|l), (45) 
and, corresponding to the failure result, 

BjBf ^ {l-taii^9o)\0){0\ (46) 



Examining these results, we can now see, in a simple way, how this procedure 
works. Define the single qubit states \ipj), for j = 0,1 as 

IV,) =cos0o|O> + (-!)■'■ sin^oll). (47) 

When Alice performs her measurement, she obtains either or 1. If she obtains 
0, then Bob is left with the state {ipo) if |5'o) was sent, and if |^i) was 
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sent. If she obtains 1, then Bob is left with the state \tpi) if |^'o) was sent, and 
\tpo) if |\E'i) was sent. In either case, Bob is faced with discriminating between 
the non-orthogonal states Itpo) and \ipi)- He then applies the optimal POVM 
to distinguish between these states, and if he succeeds, he knows which of the 
two states he has. What he does not know, is which of his single-qubit states 
corresponds to |^'o), and which to Ivfi). It is this bit of information that the 
result of Alice's measurement contains. Only by combining the results of their 
measurements can Alice and Bob deduce which state was sent. 

The analysis in the preceding paragraph immediately allows us to see that 
there is another solution to the problem of finding a POVM in which one of the 
parties can receive a failure signal, and that is the one in which the roles of Alice 
and Bob are interchanged. In that case. Bob makes a projective measurement, 
and Alice makes a measurement whose results are described by a three-outcome 
POVM. 

It was noted by Virmani, et al. 2 , that for any two two-qubit states with 
the same Schmidt basis, which they called Schmidt correlated, it is possible 
for Alice to transfer all of the information about the state to Bob by making 
a measurement in the basis {|ro), and telling Bob the result of her mea- 
surement. In general Bob's measurement will depend on the results of Alice's. 
What we have seen in this section is that for special choices of the two states, 
Alice and Bob always make the same measurement, which means they can make 
the measurement as soon as they receive the particles. They, each, then, posses 
a classical bit, and by comparing these bits they can tell which state they were 
sent. 

4 Optical realization 

We now want to show how this measurement can be realized optically. The 
states l^'o) and are two-photon states with the information encoded in the 
polarization of the photons. We suppose that |0) corresponds to horizontal po- 
larization and |1) to vertical. Alice's measurement is then straightforward; she 
sends her photon through a polarization beam splitter. A horizontally polarized 
photon incident on this device will continue in a straight line while a vertically 
polarized photon will be deflected by ninety degrees. Alice orients her polariza- 
tion beam splitter so that a photon in the polarization state (|0) + \l))/^/2 is 
transmitted and one in the state (|0) — \1))/V2 is deflected. She has detectors 
in both paths, and she simply observes which one clicks. 

Bob's measurement is more complicated, but it has been worked out by 
Huttner, et al. ^Jj. They presented two implementations of the POVM, one in 
which the failure signal can be detected explicitly and one in which it cannot, and 
demonstrated the second experimentally. We shall describe their first scheme. 
It makes use of two polarization beam splitters, and one standard, polarization- 
insensitive beam splitter, and is depicted in Fig. 1. The input state, which is 
either \^o) or IV'i), is sent into the first polarization beam splitter in mode a. 
The vertically polarized part of the state is deflected into mode b, while the 
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Figure 1: Interferometer for realizing three-outcome POVM. The photon enters 

in mode a and encounters a polarization beam splitter. Its vertically polarized 
part is refelected into mode b, while its horizontally polarized part is trans- 
mitted in mode a. In its passage through the device, the photon encounters a 
polarization insensitive beam splitter and one more polarization beam spliter. 
If the photon emerges in mode c, the measurement has failed, and if it emerges 
in mode a, it has succeeded. 



horizontally polarized part continues in mode a. If the input state is given by 
|0m)o = cK|0)a +/3|l)a) where the subscripts on the states denote the mode, we 
have that just after the first polarization beam splitter 

|<^m)A^a|0)a+/3|l)6. (48) 

The beam splitter transmits a photon with transmissivity t and reflects it with 

reflectivity r. This implies that after passing through the beam splitter the state 
|0)a becomes t\0)a + r\0)c- Finally, after the second polarization beam splitter, 
the output state, \4>out) is 

\^out)=at\0)a+(3\l)a + ar\0),. (49) 

Choosing t = tan^oj we have that if the input state is |V'o)i then 

l^out) = sineo(|0)a + |l)a) + Vcos20o|O)c, (50) 
and if the input state is \tpi), then 

\cPout) = sin^o(|0)„ - |1)„) + Vcos2^o|0)c. (51) 

Note that the parts of the two output states in the a mode have orthogonal 
polarizations, and can be distinguished by orienting a third polarzation beam 
splitter so that (|0)a + \l)a)/V2 is transmitted and (|0)a — \l)a)/V2 is deflected. 
If the photon is detected in mode c, the procedure has failed. Note that both 
Alice's and Bob's measurements can be realized using only linear optics. 
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5 More than two parties 



It is relatively easy to generalize the procedure in section 3 to divide the infor- 
mation about which of two states was sent among any number of parties. We 
shall show how to do this for both qubits and for qutrits. 
Let us start with two A^-qubit states 

l^o) cose'o|00...0> +sin6io|ll...l) 

= 0086*0100... 0) -sin6'o|ll...l), (52) 

where < < j^- Each of the qubits is sent to one of N parties, Ai, . . . ^jv- 
Each of the parties, A\ through Aj^^x measures their qubit in the {ro,ri} 
basis (see Eq. (|43|) ). and Ajq performs the unambiguous-state discrimination 
procedure for the states j-^o) and (see Eq. MTU ). If parties A\ through 
Ajv_i obtained ng results of |ro) and n\ results of |ri), then the states that Ajq 
is distinguishing between are 

\M = cos^olO) + (-l)"isin0o|l) 

iVm) - cos^olO) -(-l)"^sin0o|l), (53) 

i.e. Aftr's qubit will be in the state IV'ow) if the state was sent and IV'iiv) 
if the state |^'i) was sent. In order to ascertain which of the two A^-qubit 
states was sent, all of the parties will have to combine their information. If 
the measurement made by Ajv succeeds, then she will have obtained either 
or I "01), but she will not, without knowing the measurement results of all of 
the other parties, know which of these results corresponds to |5'o) and which 
corresponds to \^\)- 

The procedure can be generalized to particles with more than two internal 
states, and to demonstrate this we shall consider the case of qutrits. Consider 
the three A^-qutrit states 

|*o) = co|0...0)+ci|l...l)-|-C2|2...2) 

= co|0...0) +citj|l...l) +C2tJ*|2...2) 
1*2) = C0IO...O) +cicj*|l...l) +C2w|2...2), (54) 

where w — exp(27ri/3). Define the single qutrit orthonormal basis 
M = -i=(|0) + |l) + |2)) 
b/i> = ^(|0)+c.|l)+c.*|2)) 

\m) = ^(|0)+c^*|l)+c.|2)). (55) 

Each of the N qutrits is sent to one of the parties A\, . . . A^r. Now, parties A\ 
through Ajv-i perform projective measurements in the basis {|?/o), l^yi), 1^2)}, 
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and suppose that rrij of them find their qutrit in the state \r]j), j = 0, 1, 2. The 
party performs the optimal POVM to unambiguously distinguish the states 

mini 

I^O) = Co|0)+Ci|l)+C2|2) 

l^i) = co|0)+cic^|l) + C2CJ*|2) 

|V'2> = co|0)+cic^*|l)+C2L^|2). (56) 

After the parties Ai through An-i have performed their measurements, the 
qutrit belonging to An is in one of the three states 

l^ojv) = co|0)+cic^('"^-™i)|l)+C2c^-(™^-'"i)|2) 

IV^i^v) = co|0) + cic^('"^-'"i+i)|l)+C2C^-("^-'"i+i)|2) 

\i^2N) = co|0)+cio.(™=-™i-i)|l)+C2C^-('"^-"i-i)|2). (57) 

The qutrit is in the state ^pjN if the original iV-qutrit state was vE'j, for j = 0, 1, 2. 

If the measurement made by An succeeds, she will have found her qutrit in 
one of the states ij^j, j — 0, 1, 2. She will not know to which of the original A^- 
qutrit states it corresponds, however, without knowing the measurement results 
of all of the other parties. In particular, we have the correspondence 

*j ^ '0[j+m2-mi mod3]- (58) 

Therfore, all of the parties must combine their information in order to determine 
which of the three A^-qutrit states was originally sent. 

Note that in both the case of A^ qubits and A^ qutrits, only one party will 
receive a failure signal if the measurement fails. In addition, the probability of 
failure is the best possible, i.e. it is the same as it would be if all of the qubits 
or qutrits were measured together. Consequently, we have not lost anything by 
measuring the particles separately. 

6 Conclusion 

We have shown that it is possible to distinguish two non-orthogonal two-qubit 
states by local measurements and classical communication, making no errors 
and with one of the parties receiving a failure signal if the procedure fails. Both 
of the parties make fixed measurements, it is not the case that the measurement 
made by one party depends on the result obtained by the other. If the procedure 
succeeds, each party obtains either a or a 1, and gains no information about 
the state from their individual results. However, on combining their results, the 
parties can identify the state. 

This procedure should be useful as a basis for quantum secret sharing. It 
provides security in the same way as does the B92 protocol for quantum key 
distribution |14| . An eavesdropper. Eve, who intercepts the two-qubit state 
cannot indentify it with certainty. The best she can do is to apply the two-state 
unambiguous state discrimination procedure, which will sometimes fail. When 
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it docs, she docs not know which state to send on to AHcc and Bob, and will, 
consequently, introduce errors, e.g. Alice and Bob will have detected |\E'o) when 
l^fi) was sent. These errors can be detected if Alice and Bob publicly compare 
a subset of their measurements with information provided by the person who 
sent the states. 

There is also some protection against cheating. If Alice cheats by obtaining 
both qubits, then the best she can do is to apply two-state unambiguous state 
discrimination to them. Her measurement will sometimes fail, and then she has 
a problem. She must send a qubit to Bob, but there is no state for this qubit 
that will make Bob's measurement fail with certainty. That means that Bob 
will sometimes obtain incorrect results, i.e. when he and Alice combine their 
results, they will find that the state they detected was not the one that was 
sent. Therefore, cheating by Alice will introduce errors. 

If Bob has obtained both particles, then he also can apply two-state unam- 
biguous state discrimination to the two-qubit state. If his measurement suc- 
ceeds, he can just send a qubit in the appropriate state to Alice, and if it fails, 
he can simply state that it failed. That means that cheating by Bob cannot be 
detected. However, a modification of the protocol will solve this problem. When 
the two-qubit state is sent, the person sending the state can annoimce over a 
public channel, which of the parties is to make the projective measurement and 
which is to make the three-outcome POVM. This means that part of the time, 
Bob will be assigned to make the projective measurement, and then his cheat- 
ing will be detected. He can, however, not cheat if he is assigned to make the 
projective measurement, and in that case he will gain partial information about 
the key and not be detected. One way to address this problem is to combine 
several received bits into a block, the parity of which is a single key bit. In 
order for Bob to ascertain the key bit, he would have to know all of the received 
bits in the block, but the probability that he would can be made very low by 
choosing the block size sufficiently large. 

Secret sharing, then, provides one application of the state discrimination 
procedures discussed in this paper. Whether there are others is a subject for 
future work. 
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